Untrusted Pointer Dereference in Qualcomm products - CVE-2024-53033

Vulnerability identifier: #VU105211

CSH Severity: Low

CVSS v4: 8.5 [CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N]

CVE-ID: CVE-2024-53033

CWE-ID: CWE-822

Exploitation vector: Local access

Exploit availability: No public exploit available

The vulnerability allows a local application to execute arbitrary code.

The vulnerability exists due to improper input validation in DSP_Services. A local application can execute arbitrary code.

FastConnect 6900
FastConnect 7800
SC8380XP
WCD9380
WCD9385
WSA8840
WSA8845
WSA8845H
Inspiron 14 5441
Inspiron 14 7441
Latitude 5455
Latitude 7455
XPS 13 9345
Qualcomm Chipset Driver

Install security update from vendor's website.

Qualcomm Chipset Driver - addressed in versions 2.1.0.18, 2.1.0.30, 2.1.0.61

• https://docs.qualcomm.com/product/publicresources/securitybulletin/march-2025-bulletin.html

• Multiple vulnerabilities in Qualcomm chipsets
• Dell Client Platform update for Qualcomm Chipset driver